Microsoft-Windows-User-ControlPanel

Event	Title	Channel	Sample	Rule
6001	Initialization_CoreStart	Diagnostic	N	N
6002	Initialization_CoreStop	Diagnostic	N	N
6003	Initialization_PageStart	Diagnostic	N	N
6004	Initialization_PageStop	Diagnostic	N	N
6005	Settings_UserCreateStart	Diagnostic	N	N
6006	Settings_UserCreateStop	Diagnostic	N	N
7001	UserAccount_SettingsPageLoad	Diagnostic	N	N
7002	UserAccount_UserListRefresh	Diagnostic	N	N
7003	UserAccount_Taskflow_ConfirmPasswordPage	Diagnostic	N	N
7004	UserAccount_Taskflow_ConfirmPasswordPage7004	Diagnostic	N	N
7005	UserAccount_Taskflow_EmailPage	Diagnostic	N	N
7006	UserAccount_Taskflow_EmailPage7006	Diagnostic	N	N
7007	UserAccount_Taskflow_FinishPage	Diagnostic	N	N
7008	UserAccount_Taskflow_FinishPage7008	Diagnostic	N	N
7009	UserAccount_Taskflow_LocalUserPage	Diagnostic	N	N
7010	UserAccount_Taskflow_LocalUserPage7010	Diagnostic	N	N
7011	UserAccount_Taskflow_MoreInfoPage	Diagnostic	N	N
7012	UserAccount_Taskflow_MoreInfoPage7012	Diagnostic	N	N
7013	UserAccount_Taskflow_RoamingPage	Diagnostic	N	N
7014	UserAccount_Taskflow_RoamingPage7014	Diagnostic	N	N
7015	UserAccount_Taskflow_WebErrorPage	Diagnostic	N	N
7016	UserAccount_Taskflow_WebErrorPage7016	Diagnostic	N	N
7017	UserAccount_Taskflow_WebWizardPage	Diagnostic	N	N
7018	UserAccount_Taskflow_WebWizardPage7018	Diagnostic	N	N
7019	UserAccount_Taskflow_BitLockerInfoPage	Diagnostic	N	N
7020	UserAccount_Taskflow_BitLockerInfoPage7020	Diagnostic	N	N
7021	task_0	Diagnostic	N	N
7022	task_07022	Diagnostic	N	N
7023	task_07023	Diagnostic	N	N
7024	task_07024	Diagnostic	N	N
7025	task_07025	Diagnostic	N	N
7026	task_07026	Diagnostic	N	N
7027	UserAccount_Taskflow_AddChildPage	Diagnostic	N	N
7028	UserAccount_Taskflow_AddChildPage7028	Diagnostic	N	N
8001	UserAccount_AddUserWizard_DomainUserAdded	Diagnostic	N	N
8002	UserAccount_AddUserWizard_ExistingOnlineUserAdded	Diagnostic	N	N
8003	UserAccount_AddUserWizard_InstallProviderLinkClickedonLocal	Diagnostic	N	N
8004	UserAccount_AddUserWizard_InstallProviderLinkClickedonOnline	Diagnostic	N	N
8005	UserAccount_AddUserWizard_LocalUserAdded	Diagnostic	N	N
8006	UserAccount_AddUserWizard_NewOnlineUserAdded	Diagnostic	N	N
8007	UserAccount_AddUserWizard_OnlineWizardError	Diagnostic	N	N
8008	UserAccount_AddUserWizardOpened	Diagnostic	N	N
8009	UserAccount_ConnectDomainAccount_Completed	Diagnostic	N	N
8010	UserAccount_ConnectDomainAccount_OnlineWizardError	Diagnostic	N	N
8011	UserAccount_ConnectDomainAccountOpened	Diagnostic	N	N
8012	UserAccount_ConnectLocalAccount_Completed	Diagnostic	N	N
8013	UserAccount_ConnectLocalAccount_OnlineWizardError	Diagnostic	N	N
8014	UserAccount_ConnectLocalAccountOpened	Diagnostic	N	N
8015	UserAccount_DisconnectDomainAccount_Completed	Diagnostic	N	N
8016	UserAccount_DisconnectDomainAccountOpened	Diagnostic	N	N
8017	UserAccount_DisconnectOnlineAccount_Completed	Diagnostic	N	N
8018	UserAccount_DisconnectOnlineAccountOpened	Diagnostic	N	N
8019	UserAccount_AddUserDialogOpened	Diagnostic	N	N
8020	UserAccount_AddUserDialog_NewOnlineUserAdded	Diagnostic	N	N
8021	UserAccount_AddUserDialog_ExistingOnlineUserAdded	Diagnostic	N	N
8022	UserAccount_AddUserDialog_LocalUserAdded	Diagnostic	N	N
8023	UserAccount_AddUserDialog_OnlineWizardError	Diagnostic	N	N
9001	Failed execution of [Method].	Operational	N	N
9002	Failed execution of [Method] for instance = Iteration.	Operational	N	N
25000	PerfTrack_UAM_TaskFlowPageChangeStart	Diagnostic	N	N
25001	PerfTrack_UAM_TaskFlowPageChangeStop	Diagnostic	N	N

Event ID 6001: Initialization_CoreStart

Channel: Diagnostic
Task: Initialization_Core
Opcode: Start

Event ID 6002: Initialization_CoreStop

Channel: Diagnostic
Task: Initialization_Core
Opcode: Stop

Event ID 6003: Initialization_PageStart

Channel: Diagnostic
Task: Initialization_Page
Opcode: Start

Event ID 6004: Initialization_PageStop

Channel: Diagnostic
Task: Initialization_Page
Opcode: Stop

Event ID 6005: Settings_UserCreateStart

Channel: Diagnostic
Task: Settings_UserCreate
Opcode: Start

Event ID 6006: Settings_UserCreateStop

Channel: Diagnostic
Task: Settings_UserCreate
Opcode: Stop

Event ID 7001: UserAccount_SettingsPageLoad

Channel: Diagnostic
Task: UserAccount_SettingsPageLoad

Event ID 7002: UserAccount_UserListRefresh

Channel: Diagnostic
Task: UserAccount_UserListRefresh

Event ID 7003: UserAccount_Taskflow_ConfirmPasswordPage

Channel: Diagnostic
Task: UserAccount_Taskflow_ConfirmPasswordPage

Event ID 7004: UserAccount_Taskflow_ConfirmPasswordPage7004

Channel: Diagnostic
Task: UserAccount_Taskflow_ConfirmPasswordPage

Event ID 7005: UserAccount_Taskflow_EmailPage

Channel: Diagnostic
Task: UserAccount_Taskflow_EmailPage

Event ID 7006: UserAccount_Taskflow_EmailPage7006

Channel: Diagnostic
Task: UserAccount_Taskflow_EmailPage

Event ID 7007: UserAccount_Taskflow_FinishPage

Channel: Diagnostic
Task: UserAccount_Taskflow_FinishPage

Event ID 7008: UserAccount_Taskflow_FinishPage7008

Channel: Diagnostic
Task: UserAccount_Taskflow_FinishPage

Event ID 7009: UserAccount_Taskflow_LocalUserPage

Channel: Diagnostic
Task: UserAccount_Taskflow_LocalUserPage

Event ID 7010: UserAccount_Taskflow_LocalUserPage7010

Channel: Diagnostic
Task: UserAccount_Taskflow_LocalUserPage

Event ID 7011: UserAccount_Taskflow_MoreInfoPage

Channel: Diagnostic
Task: UserAccount_Taskflow_MoreInfoPage

Event ID 7012: UserAccount_Taskflow_MoreInfoPage7012

Channel: Diagnostic
Task: UserAccount_Taskflow_MoreInfoPage

Event ID 7013: UserAccount_Taskflow_RoamingPage

Channel: Diagnostic
Task: UserAccount_Taskflow_RoamingPage

Event ID 7014: UserAccount_Taskflow_RoamingPage7014

Channel: Diagnostic
Task: UserAccount_Taskflow_RoamingPage

Event ID 7015: UserAccount_Taskflow_WebErrorPage

Channel: Diagnostic
Task: UserAccount_Taskflow_WebErrorPage

Event ID 7016: UserAccount_Taskflow_WebErrorPage7016

Channel: Diagnostic
Task: UserAccount_Taskflow_WebErrorPage

Event ID 7017: UserAccount_Taskflow_WebWizardPage

Channel: Diagnostic
Task: UserAccount_Taskflow_WebWizardPage

Event ID 7018: UserAccount_Taskflow_WebWizardPage7018

Channel: Diagnostic
Task: UserAccount_Taskflow_WebWizardPage

Event ID 7019: UserAccount_Taskflow_BitLockerInfoPage

Channel: Diagnostic
Task: UserAccount_Taskflow_BitLockerInfoPage

Event ID 7020: UserAccount_Taskflow_BitLockerInfoPage7020

Channel: Diagnostic
Task: UserAccount_Taskflow_BitLockerInfoPage

Event ID 7021: task_0

Channel: Diagnostic
Opcode: Info

Event ID 7022: task_07022

Channel: Diagnostic
Opcode: Info

Event ID 7023: task_07023

Channel: Diagnostic
Opcode: Info

Event ID 7024: task_07024

Channel: Diagnostic
Opcode: Info

Event ID 7025: task_07025

Channel: Diagnostic
Opcode: Info

Event ID 7026: task_07026

Channel: Diagnostic
Opcode: Info

Event ID 7027: UserAccount_Taskflow_AddChildPage

Channel: Diagnostic
Task: UserAccount_Taskflow_AddChildPage

Event ID 7028: UserAccount_Taskflow_AddChildPage7028

Channel: Diagnostic
Task: UserAccount_Taskflow_AddChildPage

Event ID 8001: UserAccount_AddUserWizard_DomainUserAdded

Channel: Diagnostic
Task: UserAccount_AddUserWizard_DomainUserAdded

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 8002: UserAccount_AddUserWizard_ExistingOnlineUserAdded

Channel: Diagnostic
Task: UserAccount_AddUserWizard_ExistingOnlineUserAdded

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 8003: UserAccount_AddUserWizard_InstallProviderLinkClickedonLocal

Channel: Diagnostic
Task: UserAccount_AddUserWizard_InstallProviderLinkClickedonLocal

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 8004: UserAccount_AddUserWizard_InstallProviderLinkClickedonOnline

Channel: Diagnostic
Task: UserAccount_AddUserWizard_InstallProviderLinkClickedonOnline

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 8005: UserAccount_AddUserWizard_LocalUserAdded

Channel: Diagnostic
Task: UserAccount_AddUserWizard_LocalUserAdded

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 8006: UserAccount_AddUserWizard_NewOnlineUserAdded

Channel: Diagnostic
Task: UserAccount_AddUserWizard_NewOnlineUserAdded

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 8007: UserAccount_AddUserWizard_OnlineWizardError

Channel: Diagnostic
Task: UserAccount_AddUserWizard_OnlineWizardError

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 8008: UserAccount_AddUserWizardOpened

Channel: Diagnostic
Task: UserAccount_AddUserWizardOpened

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 8009: UserAccount_ConnectDomainAccount_Completed

Channel: Diagnostic
Task: UserAccount_ConnectDomainAccount_Completed

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 8010: UserAccount_ConnectDomainAccount_OnlineWizardError

Channel: Diagnostic
Task: UserAccount_ConnectDomainAccount_OnlineWizardError

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 8011: UserAccount_ConnectDomainAccountOpened

Channel: Diagnostic
Task: UserAccount_ConnectDomainAccountOpened

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 8012: UserAccount_ConnectLocalAccount_Completed

Channel: Diagnostic
Task: UserAccount_ConnectLocalAccount_Completed

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 8013: UserAccount_ConnectLocalAccount_OnlineWizardError

Channel: Diagnostic
Task: UserAccount_ConnectLocalAccount_OnlineWizardError

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 8014: UserAccount_ConnectLocalAccountOpened

Channel: Diagnostic
Task: UserAccount_ConnectLocalAccountOpened

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 8015: UserAccount_DisconnectDomainAccount_Completed

Channel: Diagnostic
Task: UserAccount_DisconnectDomainAccount_Completed

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 8016: UserAccount_DisconnectDomainAccountOpened

Channel: Diagnostic
Task: UserAccount_DisconnectDomainAccountOpened

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 8017: UserAccount_DisconnectOnlineAccount_Completed

Channel: Diagnostic
Task: UserAccount_DisconnectOnlineAccount_Completed

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 8018: UserAccount_DisconnectOnlineAccountOpened

Channel: Diagnostic
Task: UserAccount_DisconnectOnlineAccountOpened

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 8019: UserAccount_AddUserDialogOpened

Channel: Diagnostic
Task: UserAccount_AddUserDialogOpened

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 8020: UserAccount_AddUserDialog_NewOnlineUserAdded

Channel: Diagnostic
Task: UserAccount_AddUserDialog_NewOnlineUserAdded

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 8021: UserAccount_AddUserDialog_ExistingOnlineUserAdded

Channel: Diagnostic
Task: UserAccount_AddUserDialog_ExistingOnlineUserAdded

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 8022: UserAccount_AddUserDialog_LocalUserAdded

Channel: Diagnostic
Task: UserAccount_AddUserDialog_LocalUserAdded

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 8023: UserAccount_AddUserDialog_OnlineWizardError

Channel: Diagnostic
Task: UserAccount_AddUserDialog_OnlineWizardError

Fields #

Name	Description
`SqmSessionGuid` GUID
`SqmID` UInt32
`SqmType` UInt32
`SqmDWORDDatapointValue` UInt32

Event ID 9001: Failed execution of [Method].

Channel: Operational
Opcode: Info

Description

Failed execution of [Method]. (Result HRESULT).

Message #

Failed execution of [%1]. (Result %2)

Fields #

Name	Description
`Method` UnicodeString
`HRESULT` UInt32

Event ID 9002: Failed execution of [Method] for instance = Iteration.

Channel: Operational
Opcode: Info

Description

Failed execution of [Method] for instance = Iteration. (Result HRESULT).

Message #

Failed execution of [%1] for instance = %2. (Result %3)

Fields #

Name	Description
`Method` UnicodeString
`Iteration` UInt32
`HRESULT` UInt32

Event ID 25000: PerfTrack_UAM_TaskFlowPageChangeStart

Channel: Diagnostic
Task: PerfTrack_UAM_TaskFlowPageChange
Opcode: Start

Fields #

Name	Description
`TaskFlowID` UInt32
`PageIndex` UInt32

Event ID 25001: PerfTrack_UAM_TaskFlowPageChangeStop

Channel: Diagnostic
Task: PerfTrack_UAM_TaskFlowPageChange
Opcode: Stop

Fields #

Name	Description
`TaskFlowID` UInt32
`PageIndex` UInt32

Provenance

ETW provider GUID 319122a9-1485-4e48-af35-7db2d93b8ad2

Defined in usercpl.dll, which carries the event manifest.

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB